Prompt Injection attack against LLM-integrated Applications